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Abstract — This paper considers the problem of secure coding 
design for a type II wiretap channel, where the main channel is 
noiseless and the eavesdropper channel is a general binary-input 
symmetric-output memoryless channel. The proposed secure 
error-correcting code has a nested code structure. Two secure 
nested coding schemes are studied for a type II Gaussian 
wiretap channel. The nesting is based on cosets of a good code 
sequence for the first scheme and on cosets of the dual of a 
good code sequence for the second scheme. In each case, the 
corresponding achievable rate-equivocation pair is derived based 
on the threshold behavior of good code sequences. The two secure 
coding schemes together establish an achievable rate-equivocation 
region, which almost covers the secrecy capacity-equivocation 
region in this case study. The proposed secure coding scheme 
is extended to a type II binary symmetric wiretap channel. A 
new achievable perfect secrecy rate, which improves upon the 
previously reported result by Thangaraj et ah, is derived for this 
channel. 

I. Introduction 

Fostered by the rapid proliferation of wireless communi- 
cation devices, technologies, and applications, the need for 
reliable and secure data communication over wireless networks 
is more important than ever before. Due to its broadcast 
nature, wireless communication is particularly susceptible to 
eavesdropping. Security and privacy systems have become 
critical for wireless providers and enterprise networks. The 
aim of this paper is to study practical secure coding schemes 
for wireless communication systems. 
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Fig. 1. Wiretap channel model 

Shannon provided the first truly scientific treatment of 
secrecy in [1], where a secret key is considered to protect 
confidential messages. The ingenuity of his remarkable work 
lies not only in the method used therein but also in the 
incisive formulation that Shannon made of the secrecy prob- 
lem based on information-theoretic concepts. Later, Wyner 
proposed an alternative approach to secure communication 
schemes in his seminal paper [2], where he inttoduced the 
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so-called wiretap channel model. As shown in Fig. [T| the 
confidential communication via a discrete, memoryless main 
channel is eavesdropped upon by a wiretapper, who has access 
to the degraded channel output. Wyner demonstrated that 
secure communication is possible without sharing a secret key 
and determined the secrecy capacity for a wiretap channel. 
Construction of explicit and practical secure encoders and 
decoders whose performance is as good as promised by Wyner 
is still an unsolved problem in the general case, except for the 
binary erasure wiretap channel [3]-[5]. 

We note that channel coding and secrecy coding are closely 
related. Roughly speaking, the goal of channel coding is to 
send a message with sufficient redundancy so that it can be 
understood by the receiver; whereas the goal of secrecy coding 
is to provide sufficient randomness so that the message can 
not be understood by anyone else. In modern communica- 
tion networks, error-correcting codes have traditionally been 
designed to ensure communication reliability. Various coding 
techniques have been thoroughly developed and tested for 
ensuring reliability of virtually all current single-user, point-to- 
point physical channels. However, only very limited work has 
considered ways of using error-correcting codes to also ensure 
security. In [3], Ozarow and Wyner considered error-correcting 
code design for a type II binary erasure wiretap channel based 
on a coset coding scheme. More recently, low-density parity- 
check (LDPC) based coding design has been studied for binary 
erasure wiretap channels in [4], where the authors have also 
presented code constructions for a type II binary symmetric 
wiretap channel based on error-detection codes. In another 
line of recent related work, secret key agreement protocols 
based on powerful LDPC codes have been studied by several 
authors [6]-[8]. Designing practical secure coding schemes for 
additive white Gaussian noise (AWGN) wiretap channels, for 
example, is still an open problem. 

In this work, we focus on secure coding schemes for a 
type II wiretap channel, where the main channel is noiseless 
and the eavesdropper channel is a binary-input symmetric- 
output memoryless (BISOM) channel. We first review and 
summarize the prior results of [2]-[4]. Inspired by [9], we 
propose a more general secure nested code structure. Next, 
we consider a type II AWGN wiretap channel and describe 
two secure coding schemes, both of which have a nested 
structure. The nesting is based on cosets of a good code 
sequence for the first scheme and on cosets of the dual of 
a good code sequence for the second scheme. In each case, 



we derive the corresponding achievable rate-equivocation pair 
based on the threshold behavior of good code sequences 
[10], [11]. By combining the two secure coding schemes, 
we establish an achievable rate-equivocation region, which 
almost covers the secrecy capacity-equivocation region for the 
described case study. Finally, we extend the secure coding to 
a type II binary symmetric wiretap channel and derive a new 
achievable (perfect) secrecy rate, which improves upon the 
result previously reported in [4]. 

II. Preliminaries 

We review here some definitions and results from [2]-[4] 
and propose a secure nested coding structure, which serves as 
preliminary material for the rest of the paper. 

A. General Wiretap Channel Model 

We consider the classic wiretap channel [2] illustrated in 
Fig. [U where the transmitter sends a confidential message to 
a legitimate receiver via the main channel in the presence of 
an eavesdropper, who listens to the message through its own 
channel. Both the main and the eavesdropper channels are 
discrete memoryless, and in particular, the eavesdropper chan- 
nel is a degraded version of the main channel. A confidential 
message w 6 W is mapped into a channel input sequence 
x = [xi, X2, ■ ■ ■ , x n ] of length n, where W = {1, . . . , M} and 
M is the number of distinct confidential messages that may 
be transmitted. The outputs from the main channel and the 
eavesdropper channel are y and z, respectively. The level of 
ignorance of the eavesdropper with respect to the confidential 
message is measured by the equivocation H(W\Z). A rate- 
equivocation pair (R, R e ) is achievable if there exists a rate 
R code sequence with the average probability of error P e — > 
as the code length n goes to infinity and with the equivocation 
rate R e satisfying 

R e < lim H(W\Z)/n. 

n — >oo 

Perfect secrecy requires that, for any eo > there exists a 
sufficiently large n so that the normalized equivocation satisfies 

H(W\Z)/n>H(W)/n-e . 

Hence, perfect secrecy happens when R e — R, i.e., all the 
information transmitted over the main channel is secret. The 
capacity-equivocation region of the wiretap channel X — > 
(Y, Z) [2] contains rate-equivocation pairs (R, R e ) that satisfy 

R e <R< ma,xI(X;Y) 

p(x) 

< R e < max[I(X:Y) -I(X;Z)]. (1) 

p(x) 

B. Wyner Codes and Secrecy Bins 

It is instructive to review first the problem of unstruc- 
tured secure code design in terms of the stochastic encoding 
scheme introduced by Wyner [2]. As demonstrated in [2] 
the secrecy capacity of the wiretap channel is achieved by 
using a stochastic encoder, where a mother codebook Co(n) 



of length n is randomly partitioned into "secret bins" or sub- 
codes {Cxin), C2(n), . . . ,CAf(n)}. A message w is associ- 
ated with a sub-code C w (n) and the transmitted codeword 
is randomly selected within the sub-code. Such codebook 
allows for decomposing the twofold objective of achieving 
both reliability and secrecy into two separate objectives. The 
mother code Co(n) provides enough redundancy so that the 
legitimate receiver can decode the message reliably, whereas 
each sub-code is sufficiently large and, hence, introduces 
enough randomness so that the eavesdropper's uncertainty 
about the transmitted message can be guaranteed. 

Even though [2] does not describe a structured coding 
scheme, it does suggest that encoding for reliability and 
confidentiality would be to partition the mother code into 
sub-codes. This idea has been extended to structured or semi- 
structured codes by using coset codes in [3], [4]. 

C. Secure Nested Codes 

In the following, we construct secure error-correcting codes 
with the nested code structure [9]Q 

We consider a nested linear code pair (Co(n), Ci(n)), where 
Co(n) is a fine code of rate Rq, and Ci(n) a coarse code of 
rate R%, We use the fine code Co(n) as the mother code, which 
is partitioned into M sub-codes consisting of the coarse code 
Ci(n) and its cosets. Each coset corresponds to a confidential 
message. The transmitter encodes a message w € W into 
an n-tuple of coded symbols randomly selected within the 
corresponding coset C w (n). By determining the coset of the 
transmitted codeword, the legitimate receiver can retrieve the 
confidential message w. The redundancies provided by each 
coset are used to confuse the eavesdropper who has full 
knowledge about the code and its cosets. We refer to a code 
structured in this manner as a secure nested code. We note 
that the code C\{n) and its cosets have the same (Hamming) 
distance properties. Hence, the secure coding design problem 
is to find a suitable nested code pair (Co(n), Ci(n)) that sat- 
isfies both confidentiality and reliability requirements. Denote 
by {C(n)} a sequence of binary linear codes, where C(n) is 
an (n, k n ) code having a common rate R c = k n /n. Now, we 
define the secure nested code sequence as follows. 

Definition 1 (secure code sequence): {C (n), C±(n)} is a 
secure nested code sequence if Co(n) is a (mother) fine code 
of rate Rq, and Ci(n) is a coarse code of rate i?i so that 
Ci(n) C Co(n) and i?i < Rq. The information rate of this 
code sequence is Rq — R\. 

D. Good Code and Its Noise Threshold 

Following MacKay [10], we say that a code sequence 
{C(n)} is good if it achieves arbitrarily small word (bit) error 
probability when transmitted over a noisy channel at a nonzero 
rate R c . Capacity-achieving codes are good codes whose rate 
R c is equal to the channel capacity. The class of good codes 
includes, for example, turbo, LDPC, and repeat-accumulate 

1 In this paper, we consider binary-input wiretap channels and nested lineal' 
codes. This idea can be extended to nested lattice codes for channels with 
continuous inputs. 



codes, whose performance is characterized by a threshold 
behavior in a single channel model [11]. 

Definition 2 (noise threshold): For a (single) channel 
model described by a single parameter, the noise threshold of 
a code sequence {C(n)} is defined as the worst case channel 
parameter value at which the word (bit) error probability 
decays to zero as the codeword length n increases. 
For example, the noise threshold is described in terms of the 
erasure rate threshold S* for a binary erasure channel (BEC) 
and the SNR threshold A* for a binary-input AWGN (BI- 
AWGN) channel. Noise thresholds associated with good codes 
and the corresponding maximum-likelihood (ML), "typical 
pair", and iterative decoding algorithms have been studied in 
[12]-[14]. 

E. Type II Wiretap Channel 

The type II wiretap channel was introduced by Ozarow and 
Wyner in [3] as a special binary-input wiretap channel with 
a noiseless main channel. Throughout the paper, we focus on 
type II wiretap channels associated with different eavesdropper 
channels. 

Example 1 (BEC-WT): Let BEC-WT(e) denote a binary- 
input wiretap channel where the main channel is noiseless 
and the eavesdropper channel is a BEC with erasure rate e. 
We refer to such a channel as the type II binary erasure wiretap 
channel. The secrecy capacity of BEC-WT(e), C Sj BEc(e)> 
equals e. 

Let {C (n)} be a sequence of dual codes, where 

C ± (n) = {x g {0, 1}" I x • y = 0, V y e C(n)} 

is the dual code of C(n). By employing the dual code as the 
coarse code in the secure nested code structure, we reorganize 
the results of [3], [4] in the following lemma. 

Lemma 1: Consider a sequence of binary linear codes 
{C(n)} of rate R c and erasure rate threshold 6* < 1 — R c 
(for the BEC). Let 



C {n) = {0, 1}" and din) = C ± (n). 



(2) 



Suppose that the secure nested code sequence {Co(n), Ci(n)} 
is transmitted over a BEC-WT(e). Then, if 



e>l-S*. 



(3) 



the achievable rate-equivocation pair (R,R e ) = (i? c , R c ). 
Lemma[T]illustrates that one can design practical secure codes 
to achieve perfect secrecy with a certain transmission rate 
(below the secrecy capacity) for a BEC-WT. The condition 
(01 implies that to achieve the secrecy capacity, the coding 
scheme requires a capacity-achieving code sequence as the 
dual code of the coarse code. 

Two capacity-achieving LDPC code sequences for BECs 
have been described in [15], called the Tornado sequence 
{Cx(n.)} and the right-regular sequence {Cr(?i)}. For both of 
these sequences, the erasure rate threshold S* = 1 — R c = e. 

Corollary 1: Consider LDPC code sequences {Ct(«-)} and 
{C R (n)} of rate R c . Let C (n) = {0, 1}" and 

C 1 (n)=C£(n) or C 1 (n)=C^(n). (4) 



Then, the secure nested code sequence {Co(n), Ci(n)} 
achieves the secrecy capacity of BEC-WT(1 — R c ). 

III. Main Results 

In this section, we consider practical coding design for 
secure communication over a type II AWGN wiretap channel. 
As shown in Fig. 12 the eavesdropper channel is a BI-AWGN 
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Fig. 2. Type II AWGN wiretap channel 
channel characterized by transition probabilities 



g(z\X = 1) = -^ ex P 



and 



g(z\X = -l) 



exp 



-(z + V2A) 



-{z - V2A) 



(5) 



where A = E s / Nq is the ratio of the energy per coded symbol 
to the one-sided spectral noise density, which is referred to as 
the SNR of the eavesdropper channel. We denote this chan- 
nel with AWGN-WT(A). The capacity-equivocation region of 
AWGN-WT(A) contains rate-equivocation pairs (R,R e ) that 
satisfy 



Re < R < 1 

< R e < 1 — Cbi-awgn(A) 



(6) 



where 



Cbi-awgn(A) = 1— 

4= / e-fe-^) 2 log 2 (l + e^)dy (7) 

V 71 " J~oo 

is the channel capacity of BI-AWGN channel with SNR A. 

In the following, we consider two approaches to designing 
secure codes, both of which have a nested structure. In each 
case, we derive the corresponding achievable rate-equivocation 
pair based on the threshold behavior of good codes [11]. 

We note that even for a general BI-AWGN channel (without 
a secrecy constraint), designing practical capacity-achieving 
codes is still an open problem. Hence, to allow secure codes 
to be implementable, we either loosen the perfect secrecy 
requirement (allow for a nonzero gap between the transmission 
rate and the equivalent rate) or reduce the transmission rate 
compared with the capacity. In the first approach, we construct 
practical codes ensuring an equivocation rate that is below the 
transmission rate; whereas, in the second approach, we design 
secure codes to achieve perfect secrecy with a transmission 
rate that is below the secrecy capacity. We summarize code 
designs and the corresponding achievable rate-equivocation 
pair as follows. 



A. Approach I: Good Coarse Code 

In Approach I, we use a good code as the coarse code Ci(ro). 

Theorem 1: Consider a sequence of secure nested codes 
{C (n), Ci(n)}, where C Q (n) = {0,1}" and {Ci(n)} is 
a good binary linear code sequence of rate R\ and SNR 
threshold A* (for BI-AWGN channels). Suppose that the 
secure nested code sequence {Co(n), C\(n)} is transmitted 
over AWGN-WT(A). Then, if A > A*, the rate-equivocation 
pair 



(R, R e ) = (1-Ri, 1-C: 



BI-AWGN 



(A)) 



(8) 



is achievable. 

Theorem Q] is proved in Appendix [A] Note that if the code 
sequence C\ (n) is not a capacity-achieving sequence, then 



Ri < Cbi- 



AWGN 



(A*) < Cbi-awgn(A). 



The gap between the rate Ri and the capacity Cbi-awgn(A*) 
implies R e < R. Hence this approach cannot achieve perfect 
secrecy when using non capacity-achieving sequences. 

Example 2: Consider a sequence of (4, 6) regular LDPC 
codes {Cldpc("-)} [16]- Let 

e Q (n) = {0, 1}" and C x {n) = C LDPC (n). 

The design rate of Cldpc(") is Ri = 1/3. The SNR threshold 
of {Cldpc(^)} satisfies A* < 0.302 under typical pair 
decoding [14] (and hence, under ML decoding). Assume that 
the secure code {Co(n), Ci(n)} is transmitted over AWGN- 
WT(A = 0.302). The achievable rate-equivocation pair is given 
by 

(R, R e ) = (1 - Rx , 1 - Cbi-awgn (0.302)) 
= (2/3, 0.663). 

In this case, the gap between the transmission rate and the 
equivalent rate is less then 0.004. 

Moreover, Approach I can be extended to the general AWGN 
wiretap channel (the main channel is also a BI-AWGN chan- 
nel) by constructing a nested LDPC code pair. 

B. Approach II: Dual Good Code as Coarse Code 

In Approach II, we use the dual code of a good code as the 
coarse code C\(n). Let 



Q(x) 



1 ( *\ , 
exp az. 

2tt V 2 



(9) 



Theorem 2: Consider a sequence of good binary linear 
codes {C(n)} of rate R c and erasure rate threshold 5* (for 
BECs). Let 

C {n) = {0, 1}" and C x {n) = C^{n). (10) 

Suppose that the secure nested code sequence {Co(n), Ci(n)} 
is transmitted over an AWGN-WT(A). Then, if 



Q(V2A) > (l-«J*)/2, (11) 
the rate-equivocation pair (R,R e ) = (R c , R c ) is achievable. 



We provide the proof in Appendix [B] Theorem [2] illustrates 
that R e = R if the eavesdropper channel SNR A satisfies the 
condition ( fTTT i. Hence we can achieve perfect secrecy without 
using capacity-achieving codes. 

Example 3: We use a sequence of (4, 6) regular LDPC 
codes {Cldpc^)} of rate R c = 1/3 as in Example|2] Let 

C (n) = {0,l}" and Ci(n) = C£ DPC (n). 

The erasure rate threshold of {Cldpc(^)} is lower-bounded 
as S* > 0.665 under typical pair decoding [17] (and hence, 
under ML decoding). Assume that the secure code sequence 
{C {n), Ci(n)} is transmitted over AWGN-WT(A > 0.465). 
Since 

2Q(V2X) > 0.335 >l-8*, 

Theorem [2] implies that this code sequence can achieve perfect 
secrecy at the transmission rate 1/3. 

Corollary 2: Consider LDPC code sequences {Ct(^)} and 
{C R (n)}. Let C (n) = {0,1}™ and 



Ci (n) = (n) or d (n) = (n) . 



(12) 



Assume that the nested code sequence {Co(n), Ci(n)} is 
transmitted over AWGN-WT(A). Then, perfect secrecy can be 
achieved at (and below) the transmission rate 2Q(V2A). 

Corollary |2] implies that the gap between the secrecy capac- 
ity ^ and the achievable (perfect) secrecy rate is 



A = 1 - CW- 



BI— AWGN 



(A) - 2Q(V2A) 



The gap A can be reduced if one can find a tighter sufficient 
condition than ( fTTT i. 

C. Achievable Rate-Equivocation Region 

Now, we consider the achievable rate-equivocation region 
based on practical codes for AWGN-WT(A). For a given 
channel SNR A, we choose a good code sequence {C(n)} of 
rate R* so that its SNR threshold A* < A. Let C (n) = {0, 1}™ 
and select C\{n) from 

{0}", {0,1}", C(n), andCp» 

corresponding to different equivocation rate requirements. By 
using a time-sharing strategy, we can show that the secure 
coding scheme achieves the rate-equivocation region 

(0,0), 

Trp , ,J (2g(v / 2A),2Q(V2A)), 

R AWT = convex hull { fe„N(A)) , 

(1,1-C B i-awgn(A)), (1,0) 

Example 4: Consider AWGN-WT(A = 0.32) and the good 
code sequence {C(n)} = {Cldpc(^)} described in Exam- 
ple 12 whose SNR threshold is bounded as 

A* < 0.302 < 0.32 = A. 

Fig. [3] depicts the region Mawt and compares it with the 
capacity-equivocation region for AWGN-WT(0.32). 
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Fig. 3. Achievable rate-equivocation region for AWGN-WT(0.32) 



IV. Type II Binary Symmetric Wiretap Channel 

In this section, we study the type II binary symmetric 
wiretap channel. This channel was studied previously in [4] 
and an achievable secrecy rate based on error-detecting codes 
was given. In the following, we apply the coding technique in 
Approach II and obtain an improved secrecy rate with respect 
to the result in [4]. 

Let BSC-WT(q) be a type II binary symmetric wiretap 
channel, where the eavesdropper channel is a binary symmetric 
channel (BSC) with crossover rate q. The secrecy capacity of 
BSC-WT((7) C s bsc(</) = h(o)> where h(q) is a binary entropy 
function. We first summarize the result of [4] in the following 
lemma. 

Lemma 2: Consider a sequence of error-detecting codes 
{Cu(n)} of rate R±, whose detection error rate is less than 
2 -nR K Let c Q (n) = {0,1}" and d(n) = C D (n). Assume 
that the nested code sequence {Co(n), Ci(n)} is transmitted 
over a BSC-WT(g). The maximum possible secrecy rate that 
can be achieved by this construction is — log 2 (l — q). 
The authors of [4] have also stated that error-detecting codes 
include Hamming codes and double-error-correcting BCH 
codes; however, most known classes of error-detecting codes 
have R\ = 0. Hence, the implementation of such secure codes 
described in Lemma |2] is still an open problem. 

Following Approach II, we construct implementable perfect 
secrecy nested codes for BSC-WT(g) as follows. 

Theorem 3: Consider a sequence of good binary linear 
codes {C(n)} of rate R c and erasure rate threshold S* (for 
BECs). Let C (n) = {0,1}" and d(n) = C x {n). Suppose 
that the secure nested code sequence {Co(n), Ci(n)} is trans- 
mitted over an BSC-WT(q). Then, if 

g>(l-<y*)/2, d3) 

the rate-equivocation pair (R,R e ) = (R c , R c ) is achievable. 

Proof: The proof is similar to the one described in 
Appendix [B] by constructing an equivalent BSC channel as 
in Fig. g] ■ 




Fig. 4. Equivalent BSC channel with crossover probability q 



By using the LDPC code sequence {CR,(n)}, i.e., setting 
Ci(n) = C^(n), the achievable (perfect) secrecy rate under 
this construction is 2q, which is better than — log 2 (l — q) 
derived in [4]. We compare the achievable (perfect) secrecy 
rate with the secrecy capacity for BSC-WT(g) in Fig. [5] 




crossover probability q 

Fig. 5. Achievable secrecy rate vs secrecy capacity for BSC-WT(g) 



V. Conclusion 

In this paper, we have addressed the problem of secure 
coding design for a type II wiretap channel. A secure error- 
correcting code has been proposed in terms of a nested code 
structure. Two secure nested coding schemes have been studied 
for a type II AWGN wiretap and the corresponding achievable 
rate-equivocation pair has been derived based on the threshold 
behavior of good code sequences. Combining the two secure 
coding schemes, we have established an achievable rate- 
equivocation region, which almost covers the secrecy capacity- 
equivocation region in this case study. Furthermore, we have 
also applied the proposed secure coding scheme to a type II 
binary symmetric wiretap channel, and have obtained a new 
achievable (perfect) secrecy rate, which improves upon the 
previous result of [4]. 

Appendix 

A. Proof of Theorem Q] 

The reliability at the desired receiver can be ensured since 
the main channel is noiseless. Now, we calculate only the 



equivocation: 

H(W\Z) = H{W,Z) - H(Z) 

= H{W, X, Z) - H(X\W, Z) - H(Z) 

> H(X) - H(K\W, Z) - /(X; Z) 

> n- ff(X|W, Z) - nC B i-AWGN(A). 



w 



(14) 



In order to calculate the conditional entropy H (X| W, Z), we 
consider the following situation. Let us fix W — w and assume 
that the transmitter sends a codeword x £ C w (n) . Given index 
W — w, the eavesdropper decodes the codeword x based 
on the received sequence z. Let P(C W , n) denote the average 
probability of error under ML decoding at the eavesdropper 
incurred by using coset C w (n). We note that the code C\{n) 
and its coset C w {n) have the same distance properties, and 
hence, have the same SNR threshold under ML decoding. 
Based on the threshold behavior of good codes [11] and the 
condition A > A*, we have linin^co P(C W , n) = 0. Moveover, 
Fano's inequality implies that 

lim H(X\W,Z)/n< lim [l/n + P(C W , n)i?i] = 0. (15) 

n — >oo n — >oc 

Combining ( TT4T > and (1151 1. we have the desired result. 

B. Proof of Theorem [2] 

To develop the achievable rate-equivocation pair, we con- 
sider an equivalent channel model illustrated in Fig. [6] We 
observe that the equivalent channel embeds a binary erasure 
wiretap channel X — > (Y, Z'), where Z' is the BEC output 
with alphabet {1, 0, —1}. The proof can be outlined as follows. 

We first construct a BEC-WT(e) and an associated channel 
with transition probabilities fz\z> so that the channel X — > Z 
is equivalent to the original BI-AWGN with SNR A. To this 
end, we choose the erasure rate e as follows 

/oo 
min[g(z\X = -1), g(z\X = 1)] dz = 2Q(V2\). 
-oo 

Let us define transition probabilities fz\z' as 

( g(z\X=l)-g(z\X 

f(z\Z> = 1) = 

f(z\Z' = Q): 



g{z\X=l)-g(z\X = -l) z > Q 

z < 



g(z\X = -l)/e z>0 
g{z\X = l)/e z<0 



f(z\Z' 



-1) 







z > 



g{z\X=-l)-g(z\X = l) z<Q (16) 

We can easily verify that J2 Z > P( z '\ x )f( z \ z ') — 9( z \ x )- This 
implies that the designed concatenated channel is equivalent 
to the original AWGN-WT(A). 

Next, we design secure nested codes for the upgraded BEC- 
WT(e). Note that the confidential message W, the BEC output 
Z', and the received signal at the eavesdropper Z satisfy the 
Markov chain W — > Z' — > Z. The data processing inequality 
[18] implies that the normalized equivocation can be bounded 
as 

H{W\Z)/n > H(W\Z')/n. 
Finally, we have the desired result by applying Lemma Q] 
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